In the Linux kernel, the following vulnerability has been resolved:
xen-netfront: Add missing skb_mark_for_recycle
Notice that skb_mark_for_recycle() is introduced later than fixes tag in commit 6a5bcd84e886 ("page_pool: Allow drivers to hint on SKB recycling").
It is believed that fixes tag were missing a call to page_pool_release_page() between v5.9 to v5.14, after which is should have used skb_mark_for_recycle(). Since v6.6 the call page_pool_release_page() were removed (in commit 535b9c61bdef ("net: page_pool: hide page_pool_release_page()") and remaining callers converted (in commit 6bfef2ec0172 ("Merge branch 'net-page_pool-remove-page_pool_release_page'")).
This leak became visible in v6.8 via commit dba1b8a7ab68 ("mm/page_pool: catch page_pool memory leaks").
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernelUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade rvUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-64k-coreUpgrade perfUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-64k-develUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debugUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-core | Nov 4, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-devel | Apr 10, 2025 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-static | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2024 | May 8, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 27, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade rvUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade perfUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-debuginfo | Jul 16, 2024 | May 14, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade dtb-apmUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade dtb-qcomUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmallUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-exynosUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-optional | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oracle | Jul 16, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub